gst-plugin-scan (dvdemux) and selinux

[Andrea Vai]

Hi,
  I constantly get notifications from selinux complaining about a
dvdemux problem.

As you can see in

https://lists.fedoraproject.org/archives/list/selinux@.../thread/KR2I5LZDDMTQPKXVULC7C4KGILQSDX6F/

it seems that "gst-plugin-scan" is
trying to make stack executable which is possible attack or possible
bug in code

thus I am asking here.

Could anybody help to solve this issue?

Thank you very much,
Andrea

(gstreamer 0.10.36, fedora 27)
_______________________________________________
gstreamer-devel mailing list
[hidden email]
https://lists.freedesktop.org/mailman/listinfo/gstreamer-devel

[Nicolas Dufresne-5]

Le lundi 19 février 2018 à 09:21 +0100, Andrea Vai a écrit :

> Hi,
>   I constantly get notifications from selinux complaining about a
> dvdemux problem.
>
> As you can see in
>
> https://lists.fedoraproject.org/archives/list/selinux@...
> ject.org/thread/KR2I5LZDDMTQPKXVULC7C4KGILQSDX6F/
>
> it seems that "gst-plugin-scan" is
> trying to make stack executable which is possible attack or possible
> bug in code
>
> thus I am asking here.
>
> Could anybody help to solve this issue?
>
> Thank you very much,
> Andrea
>
> (gstreamer 0.10.36, fedora 27)
> ____________________________________

I'm sorry, but GStreamer 0.10.36 is no longer supported. It's not clear
from your report if you notice this error or if you really care about
DV support here. Could you clarify ? Meanwhile, my recommandation would
be to not install this plugin in your legacy GStreamer 0.10 support. Be
aware that making the stack executable is not something we usually do
in GStreamer, but GStreamer depends on many libraries, I bet the DV
library we are using is to be looked at.

Nicolas
_______________________________________________
gstreamer-devel mailing list
[hidden email]
https://lists.freedesktop.org/mailman/listinfo/gstreamer-devel

[Andrea Vai]

Hi,
  thank you for your reply.

> Il giorno lun, 19/02/2018 alle 15.22, Nicolas Dufresne ha scritto:
>
> I'm sorry, but GStreamer 0.10.36 is no longer supported. It's not
> clear
> from your report if you notice this error or if you really care
> about
> DV support here. Could you clarify ?
I simply noticed the error and was wondering how to get rid of it. I
actually don't know for sure whether I need DV support or not. If it
is needed to play DV files captured from a ieee1394 DV camera, then I
think the answer is yes.

>  Meanwhile, my recommandation
> would
> be to not install this plugin in your legacy GStreamer 0.10 support.
Ok thank you. Are you talking about gst-plugin-scan? How could I do
it? Sorry but I didn't find the answer by myself.

> Be
> aware that making the stack executable is not something we usually
> do
> in GStreamer, but GStreamer depends on many libraries, I bet the DV
> library we are using is to be looked at.

Thank you for the explanation; do you know how to contact possibly the
 developers of the DV library you are using?

(sorry for some silly questions but I am not an expert).

Bye,
Andrea
_______________________________________________
gstreamer-devel mailing list
[hidden email]
https://lists.freedesktop.org/mailman/listinfo/gstreamer-devel

[Nicolas Dufresne-5]

Le mardi 20 février 2018 à 13:11 +0100, Andrea Vai a écrit :

> Hi,
>   thank you for your reply.
>
> > Il giorno lun, 19/02/2018 alle 15.22, Nicolas Dufresne ha scritto:
> >
> > I'm sorry, but GStreamer 0.10.36 is no longer supported. It's not
> > clear
> > from your report if you notice this error or if you really care
> > about
> > DV support here. Could you clarify ?
>
> I simply noticed the error and was wondering how to get rid of it. I
> actually don't know for sure whether I need DV support or not. If it
> is needed to play DV files captured from a ieee1394 DV camera, then I
> think the answer is yes.

These are different libraries. You have to go read the code, maybe get
a stack trace from SELinux to continue this work. It's unlikely the
GStreamer community will consider doing this.

>
> >  Meanwhile, my recommandation
> > would
> > be to not install this plugin in your legacy GStreamer 0.10
> > support.
>
> Ok thank you. Are you talking about gst-plugin-scan? How could I do
> it? Sorry but I didn't find the answer by myself.

gst-plugins-scan is irrelevant, it's likely the library used by a
plugin being scanned that caused this error. Executable are
meaningless.

>
> > Be
> > aware that making the stack executable is not something we usually
> > do
> > in GStreamer, but GStreamer depends on many libraries, I bet the DV
> > library we are using is to be looked at.
>
> Thank you for the explanation; do you know how to contact possibly
> the
>  developers of the DV library you are using?

Maybe ask your package manager ? (apt info / dfn info / ...)

Nicolas
_______________________________________________
gstreamer-devel mailing list
[hidden email]
https://lists.freedesktop.org/mailman/listinfo/gstreamer-devel